Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier: TZoA3cIvZCaD4y8U6SIW2hjP2MtDU7CwPFxxVk2hKqY=
Subject key identifier: 12:47:E4:D1:20:AF:3D:93:BF:C3:52:94:46:E8:A6:2D:FE:41:8D:18
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 0199FFC84EA49880A84FFFEC041A071468EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number: 0548
Signing time: Mon 20 Oct 2025 04:02:21 +0000
Manifest this update: Mon 20 Oct 2025 04:02:21 +0000
Manifest next update: Tue 21 Oct 2025 04:02:21 +0000
Files and hashes: 1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: ZRPDT8TT2y/lmxubgkl0VxjGnoQarcV0+lEG26y35mI=)
2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:4e:a4:98:80:a8:4f:ff:ec:04:1a:07:14:68:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Oct 20 04:02:21 2025 GMT
Not After : Oct 21 04:02:21 2025 GMT
Subject: CN=1247e4d120af3d93bfc3529446e8a62dfe418d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9b:34:99:77:81:b6:12:50:3d:62:e2:42:ba:
97:a1:9f:bd:ce:2f:74:da:c5:bd:23:56:4e:24:a9:
b6:e8:9e:c6:f7:7e:a7:2d:26:17:ad:28:0e:12:4b:
a1:ae:b9:b5:36:ab:f4:06:43:53:68:aa:e4:e5:a3:
ec:11:47:a1:9d:8f:31:e7:88:f6:cf:f7:8c:ff:ff:
4a:42:d2:94:43:23:68:5a:a5:71:ac:82:02:f3:9d:
f3:59:d0:06:8c:d1:f0:9d:12:1b:60:f2:27:cc:47:
37:08:c1:30:63:d3:e9:e3:cb:e8:4d:b3:53:c3:71:
41:bf:ef:86:55:12:ef:bd:6c:97:4c:11:55:5b:ca:
6f:d3:74:4b:59:b4:cc:4f:bc:3f:e7:0c:46:b8:27:
fd:e9:8d:09:82:9c:23:4d:a3:4d:1a:4f:6f:ca:14:
5d:f4:7c:78:6b:dd:4e:af:6f:a2:5e:6c:c0:22:36:
ce:32:d0:05:9b:4d:2f:eb:5b:e7:50:68:15:0a:ce:
24:1f:d1:e5:a8:d2:1d:e2:b9:d3:9a:0b:ac:1f:33:
ef:56:17:c4:01:8f:bf:81:35:46:1a:9d:f6:cd:62:
a7:82:1d:cd:d5:3d:56:fb:b0:14:bf:ea:2a:d3:2d:
49:29:79:50:c7:fb:c7:b1:44:e7:c4:96:42:41:76:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:47:E4:D1:20:AF:3D:93:BF:C3:52:94:46:E8:A6:2D:FE:41:8D:18
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:47:f7:5b:a3:b6:91:a0:18:99:85:60:81:fd:c8:ed:b7:3c:
30:51:5d:ad:5e:ce:f2:ee:f4:c9:ad:4d:15:f1:ff:cd:cc:e6:
89:e1:a5:6b:d1:89:3a:bb:86:e0:8b:40:b0:2c:46:b0:6e:15:
8b:ce:c1:c0:77:52:cd:75:f8:85:c5:bb:5c:bc:29:88:0c:55:
29:7f:9c:59:7c:a2:94:80:9a:77:3b:3b:bd:db:04:24:e5:ce:
0f:52:f7:b4:7f:64:f6:32:31:b0:93:67:af:45:bf:91:ad:6a:
36:5c:c1:a2:cc:15:19:c2:5e:71:de:65:dd:46:7e:e1:24:9e:
c5:cb:4e:61:91:8f:dd:6b:ff:95:78:7a:68:8a:18:0e:f0:68:
68:ed:ec:75:16:86:0b:93:98:20:76:54:ee:73:a0:c7:6e:ee:
ba:27:85:12:bd:87:64:95:5f:22:89:71:5c:c6:8c:84:8e:01:
cc:8c:64:3f:98:92:77:e9:0f:aa:dc:82:35:a7:13:87:10:06:
9e:49:40:8f:67:fa:0d:62:ea:4d:05:ba:11:0e:ba:ca:be:c7:
0d:f4:62:32:78:0c:3b:6f:66:9b:b1:90:b6:0f:8f:8e:39:1d:
5d:bf:2e:33:65:bb:56:ee:01:96:8a:1c:08:b4:0b:e0:69:45:
c8:e1:3a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yE6kmICoT//sBBoHFGjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTEyOGE3NjJjZWViNmI1OWY1NDMxNTY4YmMxM2ZjZTQx
YWJhMTIwHhcNMjUxMDIwMDQwMjIxWhcNMjUxMDIxMDQwMjIxWjAzMTEwLwYDVQQD
EygxMjQ3ZTRkMTIwYWYzZDkzYmZjMzUyOTQ0NmU4YTYyZGZlNDE4ZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ps0mXeBthJQPWLiQrqXoZ+9zi90
2sW9I1ZOJKm26J7G936nLSYXrSgOEkuhrrm1Nqv0BkNTaKrk5aPsEUehnY8x54j2
z/eM//9KQtKUQyNoWqVxrIIC853zWdAGjNHwnRIbYPInzEc3CMEwY9Pp48voTbNT
w3FBv++GVRLvvWyXTBFVW8pv03RLWbTMT7w/5wxGuCf96Y0JgpwjTaNNGk9vyhRd
9Hx4a91Or2+iXmzAIjbOMtAFm00v61vnUGgVCs4kH9HlqNId4rnTmgusHzPvVhfE
AY+/gTVGGp32zWKngh3N1T1W+7AUv+oq0y1JKXlQx/vHsUTnxJZCQXaJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJH5NEgrz2Tv8NSlEbopi3+QY0YMB8GA1UdIwQY
MBaAFPyRKKdizutrWfVDFWi8E/zkGroSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAt
MTM1ZDcwOWI1OWUwLzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAtMTM1ZDcwOWI1OWUw
LzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkf3W6O2
kaAYmYVggf3I7bc8MFFdrV7O8u70ya1NFfH/zczmieGla9GJOruG4ItAsCxGsG4V
i87BwHdSzXX4hcW7XLwpiAxVKX+cWXyilICadzs7vdsEJOXOD1L3tH9k9jIxsJNn
r0W/ka1qNlzBoswVGcJecd5l3UZ+4SSexctOYZGP3Wv/lXh6aIoYDvBoaO3sdRaG
C5OYIHZU7nOgx27uuieFEr2HZJVfIolxXMaMhI4BzIxkP5iSd+kPqtyCNacThxAG
nklAj2f6DWLqTQW6EQ66yr7HDfRiMngMO29mm7GQtg+PjjkdXb8uM2W7Vu4Blooc
CLQL4GlFyOE6bA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:35 2025 by rpki-client